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Dear Ms. Hofmann: 

The enclosed documents were reviewed under the Freedom of information/Privacy Acts (FOlPA), Title 5, 
United States Code, Section 552/552a. Deletions have been made to protect information which is exempt from disclosure 
with the appropriate exemptions noted on the page next to the excision. In addition, a deleted page information sheet was 
inserted in the file to indicate where pages were withheld entirely. The exemptions used to withhold information are marked 


below and explained on the enclosed Form OPCA-16a: 

Section 552 Section 552a 

°(b)(1) D(b)(7)(A) D(d)(5) 

^(b)(2) □(b)(7)(B) □(j)(2) 

°(b)(3) s(b)(7)(C) D(k)(1) 

0(b)(7)(D) n(k)(2) 

®(b)(7)(E) D(k)(3) 

°(b)(7)(F) D(k)(4) 

°(b)(4) 0(b)(8) D(k)(5) 

®(b)(5) 0(b)(9) □(k)(6) 
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184 page(s) were reviewed and 173 page(s) are being released. 

□ Document(s) were located which originated with, or contained information concerning other 
Government agency(ies) [OGA]. This information has been: 

□ referred to the OGA for review and direct response to you, 

□ referred to the OGA for consultation. The FBI will correspond with you regarding this 
information when the consultation is finished. 

You have the right to appeal any denials in this release. Appeals should be directed in 
writing to the Director, Office of Information and Privacy, U.S. Department of Justice 1425 
New York Ave., NW, Suite 11050, Washington, D.C. 20530-0001 within sixty days from the 
date of this letter. The envelope and the letter should be clearly marked “Freedom of Information 
Appeal” or “Information Appeal." Please cite the FOlPA number assigned to your request so that it 
may be easily identified. 

o The enclosed material is from the main investigative file(s) in which the subject(s) of your request was 
the focus of the investigation. Our search located additional references, in files relating to other 
individuals, or matters, which may or may not be about your subject(s). Our experience has shown, 
when ident, references usually contain information similar to the information processed in the main file(s). 
Because of our significant backlog, we have given priority to processing only the main investigative file(s). 


If you want the references, you must submit a separate request for them in writing, and they will be 
reviewed at a later date, as time and resources permit. 

See additional information which follows. 


Sincerely yours, 


David M. Hardy 
Section Chief 
Record/Information 
Dissemination Section 
Records Management Division 


Enclosure(s) 


The enclosed documents represent the fourth of a series of interim releases that will be made with regard 
to your request pertaining to the Investigative Data Warehouse. 

For your information, some of the enclosed pages contain information about other subject matters. We 
consider this information “outside the scope" of your request, and have redacted the information and marked it as 
“Outside the Scope”. 

The first page of this correspondence reflects that 184 pages were reviewed for this release. There were 
actually 1076 pages reviewed, however a further review determined that 888 pages of this material are not responsive 
to this request. 



EXPLANATION OF EXEMPTIONS 


SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552 

(b)(1) (A) specifically authorized under criteria established by an Executive order to be kept secret in the interest of national defense or foreign 

policy and (B) are in fact properly classified to such Executive order; 

(b)(2) related solely to the internal personnel rules and practices of an agency; 

(b)(3) specifically exempted from disclosure by statute (other than section 552b of this title), provided that such statute(A) requires that the 
matters be withheld from the public in such a manner as to leave no discretion on issue, or (B) establishes particular criteria for 
withholding or refers to particular types of matters to be withheld; 

(b)(4) trade secrets and commercial or financial information obtained from a person and privileged or confidential; 

(b)(5) inter-agency or intra-agency memorandums or letters which would not be available by law to a party other than an agency in litigation 
with the agency; 

(b)(6) personnel and medical files and similar files the disclosure of which would constitute a clearly unwarranted invasion of personal privacy; 

(b)(7) records or information compiled for law enforcement purposes, but only to the extent that the production of such law enforcement 

records or information ( A ) could be reasonably be expected to interfere with enforcement proceedings, ( B ) would deprive a person 
of a right to a fair trial or an impartial adjudication, ( C ) could be reasonably expected to constitute an unwarranted invasion of personal 
privacy, ( D ) could reasonably be expected to disclose the identity of confidential source, including a State, local, or foreign agency or 
authority or any private institution which furnished information on a confidential basis, and, in the case of record or information compiled 
by a criminal law enforcement authority in the course of a criminal investigation, or by an agency conducting a lawful national security 
intelligence investigation, information furnished by a confidential source, ( E ) would disclose techniques and procedures for law 
enforcement investigations or prosecutions, or would disclose guidelines for law enforcement investigations or prosecutions if such 
disclosure could reasonably be expected to risk circumvention of the law, or ( F ) could reasonably be expected to endanger the life or 
physical safety of any individual; 

(b)(8) contained in or related to examination, operating, or condition reports prepared by, on behalf of, or for the use of an agency responsible for 
the regulation or supervision of financial institutions; or 

(b)(9) geological and geophysical information and data, including maps, concerning wells. 

SUBSECTIONS OF TITLE 5, UNITED STATES CODE, SECTION 552a 

(d)(5) information compiled in reasonable anticipation of a civil action proceeding; 

(j) (2) material reporting investigative efforts pertaining to the enforcement of criminal law including efforts to prevent, control, or reduce 

crime or apprehend criminals; 

(k) ( 1 ) information which is currently and properly classified pursuant to an Executive order in the interest of the national defense or foreign 

policy, for example, information involving intelligence sources or methods; 

(k)(2) investigatory material compiled for law enforcement purposes, other than criminal, which did not result in loss of a right, benefit or 

privilege under Federal programs, or which would identify a source who furnished information pursuant to a promise that his/her identity 
would be held in confidence; 

(k)(3) material maintained in connection with providing protective services to the President of the United States or any other individual pursuant 
to the authority of Title 18, United States Code, Section 3056; 

(k)(4) required by statute to be maintained and used solely as statistical records; 

(k)(5) investigatory material compiled solely for the purpose of determining suitability, eligibility, or qualifications for Federal civilian 
employment or for access to classified information, the disclosure of which would reveal the identity of the person who furnished 
information pursuant to a promise that his/her identity would be held in confidence; 

(k)(6) testing or examination material used to determine individual qualifications for appointment or promotion in Federal Government service the 
release of which would compromise the testing or examination process; 

(k)(7) material used to determine potential for promotion in the armed services, the disclosure of which would reveal the identity of the person 
who furnished the material pursuant to a promise that his/her identity would be held in confidence. 
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EXECUTIVE SUMMARY 

The Investigative Data Warehouse (IDW) provides FBI users with the capability to view, 
query, search, retrieve, correlate, integrate, synthesize, share, and protect information 
from multiple data sources in support of intelligence and investigative activities. As a 
single point of entry for accessing both FBI data and non-FBI data, IDW provides FBI 
users with information needed to successfidly accomplish the FBI’s counter-crime, 
counter-intelligence, and coimter-terrorism missions. 

ITiis Concept of Operations (CONOPS) documents IDW as an evolving family of 
systems that will provide near- and long-term operational and developmental capabilities 
to the FBI. When fully deployed, IDW will include four (4) systems; 

• The IDW Secret-level operational system (IDW-S) consists of those builds which 
have undergone appropriate security and operational testing and have been 
approved by the responsible FBI authorities for operational use. IDW-S VI .0 
received Interim Authority to Operate (lATO) on January 23, 2004 and began 
operations for approved users over FBINet on January 25, 2004. IDW-S V2 is 
currently being developed. 

• The IDW Integration system (IDW-I) is a Secret-level representation of IDW-S 
that serves as an environment in which maintenance fixes and proposed new 
capabilities can be realistically tested before being released into IDW-S. 

• ID W-TS/SCI is a version of IDW-S that, when built, will be approved for data 
that is classified as Top Secret and/or Sensitive Compartment^ Information 
(TS/SCI). It should be noted that because the IDW Program has given high 
priority to IDW-S, the ID W-TS/SCI system is currently in the definition stage. 

• The IDW Development system (IDW-D) is an Unclassified prototyping 
environment used to facilitate experimentation with proposed new IDW 
technologies. 

This initial IDW CONOPS is focused on IDW-S and IDW-I, the two IDW systems 
currently developed. As noted above, IDW-S operates under an lATO, whereas IDW-I 
will operate under an Interim Authority to Test (lATT). This is appropriate to the role of 
IDW-S as an operational system with a general user base and to the intended role of 
IDW-I as a test environment. This CONOPS identifies all major IDW system processes 
and internal and external interfaces. It provides an overview of the IDW-S conceptual 
design and a high-level description of IDW system requirements. This IDW CONOPS is 
intended to complement other IDW Program documentation, in particular the IDW 
Program Management Plan, the IDW-S System Security Plan, and the Target 
IDW/Virtual Case File (VCF) Business Architecture. 
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SECTION 3 

DESCRIPTION OF THE IDW PROJECT 

Pertinent details regarding the IDW project are: 

Project Name: Investigative Data Warehouse (IDW) 

Account Identification Code: 1 5-0200-0- 1 -999, 

Project Initiation Date: March 2003, 

Project Planned Completion Date: December 2006 (As the Master Data 
Warehouse*). 

As a single point of entry for accessing investigative data sources, IDW provides FBI 
users with the capability to readily acquire, store, share, use, disseminate, and protect the 
information needed to successfully accomplish their assignments and the FBI’s 
overlapping missions in intelligence, counter-terrorism, and criminal investigations. 

The IDW system environment consists of a collection of UNIX and NT servers that 
provide secure access to a family of very large-scale storage devices. The servers provide 
application, web servers, relational database servers, and security filtering servers. User 
desktop muts that have access to FBINet can access the IDW web application. This 
provides browser-based access to the central databases and their access control units. The 
environment is configured so that the FBI analytic and investigative users can access any 
of the data sources and analytic capabilities of the system for which they are authorized. 
The entire configuration is scalable to enable expansion as more data sources and 
capabilities are added. 

The FBI currently owns or has access to over 30 information technology systems and 
well over 1 00 enterprise level applications that support investigative fiinctions. At the 
user level, the number of databases containing case-centric intelligence is estimated to be 
in the thousands, a number that has increased largely due to the lack of an enterprise-wide 
application for data analysis. The IDW project initiative will ultimately integrate many of 
the underlying system data sources into a single Investigative Data Warehouse that will 
support data mining and target searching of both FBI data and data from external sources 
The project will also support the selective sharing of data with other Federal agencies as 
part of the Department of Homeland Security’s (DHS) Horizontal Information Sharing 
Initiative and the Joint Terrorism Task Forces (JTTFs). The data warehouse capability 
will pennit the abundance of this investigative data to be shared on an FBI-wide basis, 
providing a complete data picture to analysts and agents. 


’ The M^er Date Warehouse is the next generation investigative warehouse which expands the analytical tool 
capabilities and includes administrative date sets so that the FBI can adequately evaluate return on investment in 
applying resources to investigative programs. 
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[the following data sets: 


Outside the Scope 


• Approved case files from the FBI’s Automated Case Support (ACS) c^e 
management system, 

• Electronic versions of the Joint Intelligence Committee Inquiry (JICI) archived 
documents, 

• Secure Automated Messaging Network (SAMNet) message traffic; 

• IntelPlus File Rooms (IDW V 1 .0 does not currently update this information), 

• Violent Gang and Terrorist Organiaation File (VGTOF) data from the Criminal 
Justice Information Systems (CJIS) Division (IDW VI .0 does not currently 
update this information). 

following additional databases and/or data sources: 

• - Data provided from FINCEN system 


Virtual Case File (VCF) 


b2 
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I IDW-I data includes the same data sets present on IDW-S: outside the Scope 

• Approved case files from the FBI’s ACS case management system, 

• Electronic versions of the JICI defined archived documents, 

• SAMNet message traffic; 

• IntelPlus File Rooms, 

• VGTOF data from the CJIS Division, 

• Translingual Information Detection, Extraction and Summarization (TIDES) 

Program Open Source News Data 


Outside the Scope 
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Figure 5-2 Data Ingest Data Transformation Process 

The ingested data is transformed from a source structure to a staging structure to provide 
more efficient searches and database organization (see Figure 5-2). During the 
transformation process, the data obtained from multiple sources is integrated so that 
relationships between the several data elements of the original data source can be 
established. The new structure provides the basis for analysis by the BI tools. In addition 
to the transformation, the Data Ingest analyzes the data quality and will maintain this 
metric for manual use by the analysts and automated use by the analysis tools. 
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Outside the Scope 


The SDMA component of the IDW-S system will process and manage all structured data 
by providing the following major processes: 


Store and manage stmctured data fr om all extern al and le gacy sy stems (IDW V2 


will initially include VCF, VGTOFj 


UNI, an d l and other future 


data sources. This data will be provided to SDMA by Data Ingest. 
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6.3 Manage and Analyze Unstructured Data 


Outside the Scope 


The unstructured data management and analysis subsystem (UDMA) provides 

fimctionality for storing, indexing, searching, and extracting information from 

unstructured mformation. This unstructured information is documented and associated 

'With the document’s metadat a. The i nitial data sources for IDW UDMA are: ACSA^CF, ^2 

INTEL+/JICI, SAMNET, and | I data, however, except for some key metadata that are 

captured for these sources there is nothing unique about the unstructured data handled by 

this subsystem. UDMA will be designed to work with most anv unstructured data source. 


Outside the Scope | 
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Outside the Scope 


6.10 Data Sources 


Outside the Scope 


The IDW V2 system will provide one web-based interface to the user thereby allowing 
access to any of nine data sources with an access control system applying to all of the 
data sources in order to conduc t globa l searchin g and analysis. T hese sources include 


four that are structured d I vGTOF I ~^nd 


unstructured (VCF, Intel+, JICI, SAMNet 
support the processing from additional data sources. 


3nd five that are 


[Versions of IDW beyond V2 will 
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The users have requested that IDW system support searches of the following databases. 
Some of these are currently not funded: 

• Legacy Systems 

o SAMNet-S 

o Jicr 

o ACS or VCF (since VCF is planned to replace ACS) 
o VGTOF 
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APPENDIX B 
Document References 


• Department of Justice (DOJ) System Development Life Cycle (SDLC) Guidance 
Document 

• SCOPE Concept of Operations, September 2002. 

• Department of Justice, Federal Bureau of Investigation, FY2004 Exhibit 300 
Capital Asset Plan, Secure Counter-terrorism Operational Prototype Environment 
(SCOPE) Investigative Data Warehouse (IDW), July, 2002 version. 

• "FBI Data Warehousing, Data Mining & Collaboration: An Enterprise View of 
Data” a public briefing 5/30/03. Mr. Kenneth Ritchhart, Section Chief, Data 
Engineering & Integration Program Management Office. 

• System Requirements Document, Investigative Data Warehouse, version 9, dated 
March 24, 2004 


• Investigative Data Warehouse Business CONORS, version 1 .0, dated February 2, 
2004 


• System Security Plan (SSP) for the Investigative data Warehouse - Secret 
(IDW-S), Version 0.9, dated January 8, 2004 


• System Engineering Management Plan (SEMP), Final Draft, version 1 .3, dated 
March 1 7, 2004 


• Unstructured Data Management and Analysis Subsystem Design Document, draft 
document dated February 1 7, 2004 


• Structured Data Management and Analysis Subsystem Design Document, draft 
document, version 1.2, dated February 25, 2004 


• Data Ingest Subsystem High-Level Design Specification, Version 0.4, dated 
February 4, 2004 
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APPENDIX D 
Data Source Descriptions 

D.l VGTOF: Violent Gang and Terrorist Organizations File 

Since September 11, 2001, Director Mueller has directed field offices of the FBI to place 
the subjects of open terrorism related investigations into the FBI's Terrorism Watch List 
which is part of the Violent Gangs and Terrorist Organization File (VGTOF) maintained 
by the National Criminal Information Center (NCIC). The Terrorism Watch List is 
currently the Counterterrorism Division's integrated listing of lone terrorists, or terrorist 
groups, of investigative interest to the FBI. 

The subjects of counterterrorism investigations are being added to the file daily and are 
accessed by other Federal, State and local law enforcement agencies whenever these 
agencies access the system for the puipose of running criminal history checks on 
individuals of interest to their own investigations (i.e., during routine traffic stops). When 
accessed by an officer, an application used with the database is capable of automatically 
notifying the officer that the name is of interest to the FBI and should be treated with 
caution. The system can provide further instructions such as requesting the officer to 
notify the FBI of the reason for the inquiry. 

The purpose of the data base is to share pertinent biographical information with other 
Federal, State and local law enforcement agencies for officer safety and mutual 
investigative interest. 

The Terrorism Watch List (VGTOF) is in the process of being consolidated into a single 
data base managed by the Terrorist Threat Integration Center (TTIC) and the recently 
announced Terrorist Screening Center (TSC), 


D.2 




ffhe application is al.so used as an analytical and a source for 


intelligence information. 
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|is an investigative tool that also serves as the central repository for 
data obtained throughout the course of an FBI investigation, to includeT 

| The 

source data is in part obtained from FBI operations. 
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DA 


This is actually a dual progranT 


serving as one repository. 


provides the abili ty| hvithin various criteria and provides 

statistical reports. I l is the repository for 

provided to the FBI by FINCEN. 


D.5 VCF: Virtual Case File 

This will be the central repository for FBI investigations. It is currently under 
development and is expected to become operational by the end of 2004. The VCF system 
will be a structured central database supporting investigative activities enterprise-wide. 
The database will contain relevant data to all cases opened for investigation including 
court files and related law-enforcement information from state and local field office 
sources. Due to security and access control challenges and programmatic constraints, 
current plans are for the IDW system to use a subset of the entire VCF content. This 
subset of VCF content will be consistent with the case classification restrictions, and 
other (Federal Grand Jury, Federal Taxpayer Information, Bank Secrecy Act Information) 
restrictions which are currently on ACS documents being copied into the IDW. 

D.6. SAMNET: Secure Automated Message Network 

This system is used to transmit and receive messages from the Intelligence Community 
and other agencies. SAMNET is also used by Legat Offices, and Field and Headquarters 
Divisions to exchange messages up to the TS/SCl level. The system is being modernized 
to include a migration to the Defense Message System (DMS), and replacement of an 
existing manual method of printing and delivering paper, with electronic delivery to the 
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appropriate desktop, based on functional profile. SAMNET information can be firom DoD 
and other Intelligence Community sources. 

D.7 JICI: Joint Intelligence Community Inquiry 

This a static collection of anti-terrorist files collected from FBI field office files offices 
following 9/11. The collection represents a historical record of field office files and is 
not currently updated on a regular basis. The files are searched for target words usually 
in conjunction with other associated databases. 

D.8 IntelPlus: Intelligence Plus 

This is an application which allows the users to view “Table of Contents” lists from large 
collections of records in various formats. The user is able to display the document 
whether it is in text form or one of several graphic formats and then print, copy or store 
the information. The application allows researchers in tracking associated documents by 
assisting the user on going to related topics and provides a convenient search capability. 
The Intel Plus application is currently orgamzed around six separate counterterrorism 
collections: 


• 

• 

• 

• 

• 

• 



b2 

b7E 

D.9 









1 The service is available to govempi^^pt organisations. 
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Table 2 Data Ingest Initiated Transaction 


Item# 

Ingest Initiated Transaction 

2004 

2005 

2006 

2007 

2008 

Record 

Size 

(average) 

Reference 

HLFR 

1 

Ingest data from externa! 
source 







REQT30 

2 

Ingest data from ACSA/CF 








3 

Ingest data from VGTOF 








4 

Ingest data from 

SAMNET-S 







REQT30.3 1 

5 











6 

Ingest data from 









REQT30.5 

7 

Ingest data from 

■1 








REQT30.6 












■ 








9 


■ 







REQT30.8 


Ingest data ffoni I 








10 

L J ' 







REQT30.9 

11 

Ingest data from 

JC! 









12 











13 

Ingest data fmm 





























REQT30.14 

15 

Ingest data froml 1 







REQT30.15 


Ingest data fronj 1 








i 1B| .1 







REQT30.16 
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Table 2 Ingest Initiated Transaction 


Item # 

Ingest Initiated Transaction 

2004 

2005 




B 

Reference 

HLFR 

17 

Ingest data fromi 1 







REQT30.17 

18 

Inaest data fromi 







REQT30.18 

19 

Ingest data frod 

1 






REQT30.19 









REQT30.20 

21 

Ingest data fromi I 







REQT30.21 

22 

Ingest data fronl 







REQT30.22 

23 

Ingest data fron| 

1 






REQT30.23 


1 

24 

Incest data frorrl 







REQT30.24 





b2 

b7E 


Page 63 


FOR OFFICIAL USE ONLY 


26 March 2004 
Version 3 


































FINAL 


FOR OFFICIAL USE ONLY 


Table 2 Ingest Initiated Transaction 


Item # 

ingest Initiated Transaction 




■ 



Reference 

HLFR 


Ingest data from FinCen - 
I linformation. 





Hi 




Ingest selectively from FinCen 
Data 








27[ 

Ingest selectivel'l 







REQT65 3 

28 




' 




ppnTRi; A 

29 








insiiB 

30T 


' 




— 


REQT67 

31 


■1 







REQT67 1 

32 


Bll 







REQT67 2 

33 

1 







REQT67 3 

34 

Ingest selectively from 







REQT67.4 
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Table 2 Ingest Initiated Transaction 


Item# 

Ingest Initiated Transaction 

2004 

2005 

2006 

2007 

2008 

Record 

Size 

favaraaet 

Reference 

HLFR 

35 


IB 





HH 

RFOTR7 fs 

36 

Ingest selectively from 








RFDTR7 A 

37 

Ingest selectively from 








RFDTA7 7 

38 

39 

Incest seleotivelv from 







REQT67 8 

Ingest selectively on an ad hoc 
basis, data from ooen sources 







RPHTAQ 

40 









41 









42 








RFnTAQ *3 

43 

inqest setectivelv froni | 







RFOTAQ A 

44 








REQT69.5 
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Table 2 Ingest Initiated Transaction 



Ingest Initiated Transaction 

2004 

2005 

2006 

2007 

2008 

Record 

Size 

(average) 

Reference 

HLFR 









REQT69 6 

46 








REQT69 7 

47 








DCDTftQ Q 

48f 


J 






RFOTfiQ Q 

49 








REQT69.10 


b2 

b7E 


Page 66 


FOR OFFICIAL USE ONLY 


26 March 2004 
Version 3 
















Investigative Data Warehouse (IDW) Documentation 
26 Aug 2005 


1 . Analysis of Requirements for Holding NATO Classified 

2. Chiliad - Analyst Update Course 

3. Computer Security Incident Response Plan 

4. Configuration Management Plan 

5 . Data Administration Manual 

6. Data Ingest Subsystem - Component Design Specifications 

7. Data Ingest Subsystem - High Level Design Specifications 

8. Data Ingest Subsystem - Record Tracking 

9. Data Ingest Subsystem - Unstructured Data Processing 

10. Data Management Manual 

11. IDW-MiTapICD 

12. IDW-SAMNetICDvl 

1 3 . IDW - Virtual Case File ICD 

14. IDW 1.1 Users Guide 

15. IDW Operations and Maintenance Support Plan 

16. IDW Security Operations Manual 

1 7. IDW-I Build Out Test Report - Phase 1 

18. IDW-I System Security Plan -I 

19. IDW-S - SAMNet ICD 


20. IDW-S ACS ICD VI 

21 . IDW-S System Security Plan -S 

22. Maintenance Manual 
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23. Materials Request Policy 

24. Performance Monitoring and Measurements 

25. Privileged Users Guide 

26. Project Management Plan 

27. RetrievalWare - Analyst Update Course 

28. System Administrators Guide 

29. System Administrators Manual 

30. Test and Evaluation Test Analysis Report 

3 1 . Training Evaluation Plan 

32. Training Management Plan 

33. User Support Manual 

34. Users Reference Guide 


35. Violent Gang and Terrorist Organization File (VGTOF) ICD 
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FBI IDW Program Management Plan IDW-NG-PM-001 .01 .00 


Data Type 

Media 

Frequency 

Intel Plus 

FTP 

Weekly 

JICI 

N/A 

One-time 

SAMNet 

FTP 

3X Daily 

Open Source 

CD 

Daily 

VGTOF 

CD 

Weekly 


Table 5-1 IDW Data Ingest Type, Media and Frequency 
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(ITOD) (FBI) 


From: 

Sent: 

To: 


Cc: 

Subject: 


I "k lTOD) (FBI) 

Thursday, September 21 , 2006 5:37 PM 

STACY-R OSE. FREIDA T. (ITOD) (FBI); JOLMA, LAWRENCE N. (ITOn)rFRI) r I 

](ITOD)(FBI): PATON, THOMAS M. (ITOD)(FBI); FERGUSON, RICHARD A. (ITOD 


(FBI): GOLDSWORTHY. ABRAM C. (ITOD)(FBI); WHITE, JERRY T. (WE) (FBI); 
SCHWARTZ. RONALD (ITOD)(FBI);| I (ITOD) (FBI); SPENCER. 

JAMES A. (ITOD)(FBI); ROBERTS. THOMAS J . (ITOD)(FBI): M CCANN. O WEN (ITOD) 
rPRiv RHn RT EILEEN F. (ITOD) (FBI): PRICE ! K ITODI (FBI U I 

J(ITOD) (FBI): SCAVONGELLl. GAIL (ITOD) (FBI); SANCHEZ. JENNIF ER R. 


bVC 


(ITODKFBh- SINGER. NAOMI E. (ITOD)(FBI); MORGAN, LEO T. Ill (ITOD)(FBI);[ 

I i(ITODWFBh: S MITH. LESLIE J. (ITOD)(FBI): SHORT. JAMES E. JR (ITOD) 

(FBO l I fITODI (FBI); BROOK S. JULIUS J. (ITOD1 (FBH: M ORIN. PAUL 

A, (ITOD)(FBI); REINER. STEVEN E (ITOD1 (FBlH tNEI (FBI); 


he 

hlC 


STEFANSSON, KAREN M. (ITOD)(FBI)£; 
RICHARD (ITOD1 (F Bh 


](ITOD)(FBI); SNELLINGS, 


(ITOD) (FBI): GRAY, SHAWN E. (ITOD) (FBI) 

(IT0D)(FB1) ■ 

INVESTIGATIVE DATA WAREHOUSE (IDW) 


UNCLASSIFIED 

NON-RECORD 
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ITOD Section ChiefsAJnit Chiefs: 


Within the next 30 days, an Operational Readiness Review (ORR) will take place for the 
INVESTIGATIVE DATA WAREHOUSE (IDW) Project. At th is particular time, the date of the ORR has no t been 
determined. IDW documention has been placed on the S drive unde j If or 132 

your review. As soon as possible, please make an effort to review the IDW documents that refer to your area of bVE 
expertise. IDW has been following the Lifecycle Management Directive (LCMDf throughout the Lifecycle of the project. 


If you are unfamiliar with IDW, please see the description of IDW below. 


Description of IDW: 


Investigative Data Warehouse (IDW) - IDW is developed by Office of the Chief Technology Officer. IDW 
enables users to perform very flexible searches simultaneously across multiple databases such as ACS (ECF), 
Intelligence Community cable messages, and selected major counterterrorism IntelPlus file rooms. Users are 
primarily from the Counter-Terrorism Division and Field Intelligence Groups. Through the IDW Special Projects 
page, created with the cooperation of the Counterterrorism Division (CTD), users can search additional sources, 
including all CIA Intelligence Information Reports (HR) sent to the FBI f rom 1978 to present, selected te rrorism 
watch lists, and several databases provided by other federal agencies (e g. b 2 


Thank You!!! 


1 1 uu I ransiTion Mananement Unit (TMU) 
Room 9483, (202) 324 


be 

b7C 

b2 


UNCLASSIFIED 


1 





ITOD Transition Management Unit 
Executive Dashboard 


Month of: September ’06’ 



Improving Steady JjjL Deteriorating 

Overall Risks(^ High 

*Criticality- defined by customer 
^ High 9 Medium Low 

* ‘Complexity - Choose one 
H-High M- Medium L-Low 


ITOD ^ . ORR 

Program Project Name/ LCMD oa^g Transihoj 
Component Gate Period 


Transition Projects Scorecard 


On plan : 
At risk a 


Issues w/plan 
No status 




5.IDW 


6/1/06 


12/30/06 


H 
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h2 
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Customer Relationship Services Program 
DAS Data Access Services Program 
E-Govemment Services Program 
ISS Information Sharing Services Program 

j Network and Communication Services Program 
j System Enhancement and Software Support Services Program 


im Vulnerability Management Services Program 
ITLM IT Licensing and Maintenance Program 
mil Technology Revitalization Services Program 
fCAM Infrastructure Consolidation and Management Program 
ACR Applications Consolidation and Retirement Program 
mi Management, Administration and Control Program 
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Total Development Costs Onclnding hardware) 


• (To be provided by the Project Manager at a later date) 


Operations and Maintenance costs are^ 


per year. 





M 

No interface with other systems 

H 

Subsequent iterations (IDW-S vl , 1 and V2) will integrate or provide access to 

1^-data provided from FINCEN svstemi 







Low ® Moderate ^ High 



□ 

Due to the usage of EDW and the siqjpoit of the Counterterrorism Division, Criminal Investigative Division and JTTTF, system 
criticality is deemed high. 




Page 22 











UNCLASSIFIED // For Official Use Only 

Federal Bureau of Investigation 

Investigative Data Warehouse (IDW) Program 



IDW Status Update 

(21 September 2005) 
Prepared for 

VfBIIDWPM) 

VSPA WAR) 


ALL IHFORHATIOH CONTAINED 

HEREIN 13 UNCLASSIFIED 

DATE 08-02-2007 BY 6S179 DHH/BJA/CAL 


be 

b7C 


IDW O&M Status Update 
UNCLASSIFIED // FOUO 


1 




UNCLASSIFIED // For Official Use Only 

other Program Updates: IDW Statistics 

• Documents in IDW 

• 434,638,628 “unique” documents (up from 434,548,739) 



IDW O&M Status Update 

UNCLASSIFIED // FOUO 2 



*** LAW ENFORCEMENT SENSITIVE - DO NOT DISTRIBUTE OUTSIDE OF FBI *** 


IDW-S V1.2 Data Collections as of August 27, 2005 


Change Notes: 
The 


(i) 


^Reports Collection was released on the IDW-S V1 .2 


Core and taken off the IDW-S SPT Subsystem on August 27, 2005. 


b2 

b7E 


1 . 


Automated Case System (ACS^ Electronic Case File (ECFI - This data set 
contains copies of the ECs, FD-302s, Facsimiles, FD-542s, Inserts, Transcriptions, 
Teletypes, Letter Head Memorandums (LHM), Memorandums and other FBI 

documents contained w ithin ACS/ECF for all but the following FBI case 

classification violations/ 


jThe files are updated daily. 


b2 


2. CIA Intelligence Information Reports fllR-CIA) : Electronic copies of all CIA non- 
TS/non-SCI Intelligence Information Reports (lIRs) and Technical Disseminations 
(TDs) from 1 978 to MAY 2004. These files are not updated. 

3. IntelPlusf iFileroom - This data set contains copies of 


scanned pages and their correspondin g OCR text files related to an FBI 

[investigation o l I Updated 


periooicaiiy. 


b2 

b6 

b7C 

b7E 


4. IntelPlusi 


Fileroom - This data set contains 


[ 


copies of scanned pages and their corresponding OCR text files related to multip le 
FBI field office data regarding the terrorist activities involving' 


5. 


periodically. 

IntelPlusI 


J Updated 


iFileroom - This data set contai ns copies of s canned pages 


and their corresponding OCR text files related to thq 
Updated periodically. 


nvestigation. 


6. JntelPlij.sr 


7. 


I ] Fileroom - This data set contains copies of sc anned paces and their 

corresponding OCR text files related to an FB | [ investigation of 

Updated periodically. 

lntelPlus [ 


b2 

bVE 


b2 

b7E 


] Fileroom - This data set c ontains copies of scanned 


pages and their corresponding OCR text files related t{ 
and provided to the FBI. Updated periodically. 


8. IntelPlusj^ 


Fileroom - This data set contains copies of scanned 


pages and their corresponding OCR text files related to acts of domestic terrorism, 
such as the April 1 9, 1 995 Oklahoma City Bombing (Okbom). Updated periodically. 


b2 

b7E 


*** LAW ENFORCEMENT SENSITIVE - DO NOT DISTRIBUTE OUTSIDE OF FBI *** 

Page 1 of 1 

ALL IIIFOPmTIOH COMTAIMED 

HEREIN IS UNCLASSIFIED 

DATE 08-02-2007 BY 65179 DHH/BJA/CAL 
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9. IntelPlud IFileroom - This data set contains copi es of scanned 

panes and their corresponding OCR text filos collected bv the FBI’j | 


I . Updated periodically. 

1 0. IntelPlus I IFileroom - This data set contains c opies of scanned pages an d 


their corresponding OCR text files related to Al Qaedd^ 




Updated periodically. 
n. IntelPlusT 


of .qcannflrl nanfis anri thp-ir rnrr Pfinnndinn O 


IFileroom - This data set contains copies 


12. IntelPlus 


JR text files related to an FBI 
Updated periodically. 


[ 


Fileroom - This data set contain s copies of scanned pages 

investigation of the 


and their corresponding OCR text files related to an FBI 


periodically, preferably daily. 


IJrhe data, once received will be updated 


1 3. IntelPlusf [ Fileroom - This data set 

contains copies of scanne d pages and their corresponding OCR text files related to 

from all 56 FBI field divisions and other agencies. 

Updated periodically. 


b2 

blE 


h2 

:b7E 


b2 

blE 


14. Joint Intelligence Committee Investigation fJICH - Scanned copies and their 
corresponding OCR text files of all FBI documents related to extremist Islamic 
terrorism between 1993 and 2002. These files are not updated. 

15. Open Source News - Various foreign news sources that have been translated into 
English, as well as a few large U.S. publications, such as the Washington Post. 
These files are updated daily. 

16. Secure Automated Messaging Network (SAMNet) - SAMNet consists of 
messaging traffic that is sent between different U.S. Government agencies through 
the Automated Digital Information Network (AutoDIN), including Intelligence 
Information Reports (lIRs) and Technical Disseminations (TD) from the FBI, 

Central Intelligence Agency (CIA), Defense Intelligence Agency (DIA), and others 
from November of 2002 to present. IDW receives copies of these classified 
messages up to SECRET with no SCI caveats. These files are updated daily. 

l-Thij bata set contains copies of 

reports regardingl | 


1 8. Violent Gang and Terrorist Organization File fVGTOFI - Lists of individuals and 
organizations associated with violent gangs and terrorism, provided by the FBI 
National Crime Information Center (NCIC). This file is updated monthly. 


b2 

b7E 
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September 12 , 2005 




Concept of Operation - Data 






CORE library documents 

- ~ 42.3 M unstructured documents in 17 collections 

- ACS ECF: Updated daily 

- IntelPlus (1 1 Filerooms): Updated when provided 

- SAMNet: Updated daily 

- JICI: Static 

- VGTOF; Updated monthly 

, - nnfln Source Nfiwa: Updated thrice weekly 


SPT documents Outside the 

- Sources 
. FBL 

• 

• Financial Crimes Enforcement Center (FinCen) 

. I I b7E 


September 12, 2005 
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Planned Major Chanaes to Services 









Program 


QA&CM 


- Work is also ongoing to develop and populate an Access database to support the 
property management and configuration management aspects of IDW. 


September 12, 2005 
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Federal Bureau of Investigation 
Information Resources Division 
Data Management Section 



Investigative Data Warehouse (IDW) 
Performance Measurement & Monitoring 
Baseline Version 1.0 
March 15, 2004 


Note: Hardcopy versions of this document must be verified for correct version number with the IDW O&M Document Control Library 
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Performance Measurement & 
Monitoring (PMM) Manual 

Baseline Version 1.0 


IDW Operation and Maintenance 
N65236-98-A-7092 (DO 6046) 


PMM NG-OM-009.BL1 


2 IDW Overview Outside the Scope 

IDW is composed of three distinct sections, ingest, user query and control 


2.1 Ingest 

The ingest function accepts information from external sources, validates the data, and 
formats the data for data storage. 


2.1.1 External Sources 

IDW receives data from, 

• The Automated Case System (ACS) is composed of several applications. These 
applications are Investigative Case Management (ICM), Electronic Case File (ECF) 
and the Universal Index (UNI). IDW uses a subset of the Electronic Case File (ECF 

)• 

• Intelnlus fCT File roomsI formerly called the 


• ijecure Automated Messaging Network (SAMNET) cable traffic messages received 
by the FBI 

• Violent Gang Terrorist Offender File (VGTOF) from Criminal Justice Information 1^2 
Systems (CJIS) Division 

• Joint Intelligence Committee Inquiry (JICI) - Paper counter-terrorism files 

• The Open Source Library is collected from global news sources that are either in 
English or have been translated into English 

• I I data received from the 

• Various paper documents including 

o handwritten notes 
o official FBI correspondence 
o intelligence analysis 
o other terrorism related information 

2.1.2 Data Validation 

IDW has been certified to handle data at a Secret level. Any data classified higher than 
Secret cannot exist in IDW. The data validation process verifies that all data to be stored in 


Note: Hardcopy versions of this document must be verified for correct version number with the IDW O&M Document Conuol Library. 
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IDW meets this security guideline. Data that is questionable is removed from the system, 
and is reviewed. After the reviewer certifies that the data is appropriate for IDW it is 
placed into the IDW databases. 



Note: Hardcopy versions of this document must be verified for correct version number with the ID W O&M Document Control Library. 
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b. Data Sources : IDW draws its information from the following data sources: 


ACS: Automated Case Support. (CT Case Files) Archived Investigative dating 
back through calendar year 1 995. Updates pushed (FTP) to IDW once per day. 
Intel Plus: Updates pushed (FTP) to IDW as needed (usually once per day). 









b2 


Domestic terrorism incidents 

Al-Oaedd 

1 Significant international terrorism incidents 


• JICI: Archived data from the Joint Intelligence Committee Investigation (JICI) 
regarding 9/11. (Static file system) 

• ORCON: Parsed data from SAMNet and ACS data collections at this caveat. 

Pushed to IDW once per day. 

• SAMNet: SECRET and below cable traffic to/from FBI Headquarters. Pulled (FTP) 
from SAMNet server (IDW chronological job runs every 10 minutes; SAMNet posts 
new data 3 times per day). 

• TFRG: Terrorist Financial records. Updates pushed (FTP) to IDW once per day. 

• VGTOF: Violent Gang & Terrorist Offense File. Updated data file is provided in 
entirety by CD on a weekly basis. 

• Open Source Research (OSINT): Current from the MiTAP server. 

c. Handling caveats can apply (here are some examples) - 

ORCON - Originator Controlled b2 

b7E 

NOFORN - Not Releasable I'o Foreign Nationals 
LES - Law Enforcement Sensitive 
COMfNT - Communications Intelligence 


Outside the Scope 


2 






IDW 


Data Sources 


IDW draws its information from the following data sources: 

ACS: Automated Case Support. Archived Investigative dating back 
through calendar year 1995. (CT Case Files) 

Updates pushed (FTP) to IDW once per day. 

Intel Plus (Updates pushed (FTP) to IDW as needed (once per day) 



Domestic terrorism incidents 
Al Qaeda 

Significant international terrorism incidents 

JICI: Archived data from the Joint Intelligence Committee 
Investigation (JICI) regarding 9/1 1 . (Static file system) 





ww 


Data Sources (cont) 



ORCON: parsed data from SAMNet and ACS data collections 
at this caveat. Pushed to IDW once per day 

SAMNet: SECRET and below cable traffic to/from FBI 
Headquarters. Pulled (FTP) from SAMNet server (IDW 
chronological job runs every 10 minutes; SAMNet posts 
new data 3 times per day) 

TFRG: Terrorist Financial records 

Updates pushed (FTP) to IDW once per day. 

VGTOF: Violent Gang & Terrorist Offense File Updated 
datafile is provided in entirety by CD on a weekly basis 

Open Source Research (OSINT): Pulled (FTP) from MiTAP 
server daily 






IDW 
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Open Source Data Sources 



Addis Ababa Tribune - 

Agencia Brasilia - 

Al-Ahram (Egypt, weekly English 

version) - 

AIIAfrica.com - 

Arabic News - 

Asahi Shimbun - 

Asia Times (Hong Kong) - 

Bangkok Post - 

Christian Science Monitor - 

Crescent International - 

Daily Telegraph (London, 

England) - 

Dawn (Karachi, Pakistan) - 

Debka (Israel) - 

East Africa Daily Nation - 

Gulf News (UAE) - 

Ha'aretz (Israel) - 

IFRC International Federation of 

the Red Cross - 


IRIN Integrated Regional 
Information Network - 
Iraq Press News Agency - 
Islamic Republic News Agency 
(Iran) - 

Jakarta Post - 
Janes - 

Jordan Times - 
L'Osservatore Romano - 
Lagos (Nigeria) Guardian - 
Lahore (Pakistan) Nation - 
Lebanon Daily Star (Beirut) - 
Malaysian Star - 
Manila Bulletin - 
Manila Times - 
Miami Herald - 




Open Source Data Sources 


Moscow Times - 
National Post and CP - 
New Straits Times (Kuala 
Lumpur) - 

PETRA (Jordanian News 
Agency) - 

Pakistan Observer (Islamabad) - 
Palestine Chronicle - 
People's Daily (China) - 
Philippine Star - 
Pravda - 

ProMed - epidemiology mail list 
Russian Information Agency 
Novosti - 

Russian Issues (Misc. Russian 
news) - 


Russian Observer - 
SABA (The News Agency of 
Yemen) - 
Saudi Gazette - 
South African Dispatch - 
Sydney Morning Herald - 
Tehran Times - 
Times of India - 
UNHCR UN High 
Commissioner on Refugees - 
Ummah News - 
Uzbekistan Report - 
Washington Post - 
XinHua News Service - 
Yemen Times (weekly) - 
Yomiuri Shimbun (Japan) - 
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IDW-NG-PM-001.01.00 


Federal Bureau of Investigation (FBI) 
Investigative Data Warehouse (IDW) 

Project Management Plan 

June 30, 2005 



Prepared under Subcontract 04-6844-27 
(Prime Contract N65236-04-D-6844) 
Task Order 0093 


NOFtTHROP GRUMMAN 


Information Technology 
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Data ingest functions will be the most frequently performed data administration tasks. As this 
function is primarily tasked to another subcontractor, O&M personnel are not deeply 
knowledgeable of the specific administrative tasks. The table below indicates the source and 
frequency of periodic data ingest operations that are performed; other operations may be needed 
on an ad hoc basis. 


Data Type 

Media 

Frequency 

ACS 

FTP 

Daily 
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Data Type 

Media 

Frequency 



Intel Plus 

FTP 

Weekly 



JICI 

N/A 

One-time 



SAMNet 

FTP 

3X Daily 



Open Source 

CD 

Daily 



VGTOF 

CD 

Weekly 



Table 5-1 IDW Data Ingest Type, Media and Frequency 
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FBI IDW System Security Plan 


IDW-NG-CA-002.01.06 


IDW System Data Ingest Flow 


Outside the Scope 


Automated Transfer of Raw Data to IDW-S 

Raw data is automatically transferred to the IDW-S system from approved data sources in 
accordance with an Interconnection Agreement, Memorandum of Understanding, Memorandum 
of Agreement or Interface Control Document. IDW-S VI. 2. 9 receives update data by the 
following means: 

• ACS update data is transmitted to the IDW-S system via File Transfer Protocol (FTP) 
sessions over FBINet. ACS initiates the FTP session. 

• IntelPlus update data is transmitted to the IDW-S system via File Transfer Protocol (FTP) 
sessions over FBINet. IntelPlus initiates the FTP session. 

• SAMNet update data is transmitted to the IDW-S system via File Transfer Protocol (FTP) 
sessions over FBINet. For SAMNet, the IDW-S system initiates the FTP session. 

• VGTOF data is transmitted to the IDW-S system via CD/DVD. 

• Open Source News data is transmitted to the IDW-S system via CD/DVD. 

• The JICI library is static and is not updated on IDW-S. Outside the Scope 

• The HR library is static. 


[data into individual serial records (in the case of ACS EC F), documents (IntelPlus, 

JICI, Open Source News, HR), messages (SAlVWet), or files (VGTOF)| 
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Secret 


Table 3.S.1.1 IDW^ Data Sets 
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Outside the Scope 


3.9.9 Indirect Connections 


3.9.9. 1 IDW-S Core Subsystem Indirect Connections 


f SYSTEM NAME ” 

CLASSIFICATION 

& 

COMPARTMENTS 

ACCREDITED 

BY 



FBI Automated 
Case System 
(ACS) 

Secret 

FBI 

FTP 


FBI Intel Plus 

1 Secret 

FBI 

FTP 

i 
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SYSTEM NAME 

CLASSIFICATION 

ACCREDITED 




& 

BY 




COMPARTMENTS 




FBI Secure 

Automated 

Messaging 

Network 

(SAMNet) 

Secret 

FBI 

FTP 


FBI National 
Crime 
Information 
Center (NCIC) 

Unclassified/SBU 

FBI 

CD-ROM 


FBI Document 

Conversion 

Laboratory 

(DocLab), 

Records 

Secret 

FBI 

CD/DVD 


Management 
Division (RMD), 
FBIHQ 





MiTAP-Open 
Source News 

Unclassified 

NA 

CD-ROM 


UR 

Secret 

CIA 

CD-ROM 



Outside the Scope 


h2 
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](OGC) (FBI) 


From: GRIGG, G. CLAYTON (CTD) (FBI) 

Sent: Tuesday, November 01, 2005 12:35 PM 


To: TANNER, MARK A. (CTD) (FBI); 

10GC)(FBI) 

b2 

Cc: 1 

l(OGC) (FBlj 

(OGC) (FBI) 

be 

Subject: RE 



b7C 


UNCLASSIFIED 

NON-RECORD 


Extracts from| 

approved by the I SPG last year. 


are available in the Direct Database portion of the IDW. These were 


b2 

b7E 


UC G. Clayton Grigg 

Proactive Data Exploitation Unit (PDEU), Rm 4913 


Terrorist Financing Operations Section (TFOS) 
Counterterrorism Division (CTD) 


12021 324f~ [office) 

—I fPagerl 
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— Original Message — 

From: TANNER, MARK A. (CTD) (FBI) 

Se nt: Tuesday. No vember 01, 2005 12:31 PM 

To f IfOGCVFBI) : GRIGG, G. CLAYTON (CTD) (FBI) 

Cc| , . lOGC) (FBI); | | (OGO (FBI) 

Subject: R q | 


UNCLASSIFIED 

NON-RECORD 


The following was received from my staff concerning the mention of| jin the letter. 


Original Message 

From I I lCTDVFBn 

Sent: Tuesday, November 01, 200 5 11:12 AM 

To: TANNER, MARK A. (CTDUFBI)J I lCTDI (OGA){ 

l_ _ _ _ ■ [ CTD) (FBI) 


|(CTD)(FBI); 


Subject: Re£ 


UN CLASSIFIED 

NON-RECORD 


b2 

be 

b7C 

b7E 


b2 

be 

b7C 

b7E 


b2 

b7E 


b2 

be 

b7C 

b7E 


Mark- 


H6(i6 this helps 


b2 

b7E 


11/6/2006 
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b6 

b7C 


Mark A. Tanner 
Director of the 

Fo reign Terrori st Tracking Task Force 
70 3 I 


b2 


Original Message 

From: TANNER, MARK A. (CTD) (FBI) 

Sent: Monday, October 31, 2005 4:00 PM 
Tn ; I bGCVFBIl : GRIGG, G . CLAYTON (CTD) (FBI) 


Cc:L 
Subject: RE[ 


Si 


OGC) (FBI)[ 


jOGC) (FBI) 


UNCLASSIFIED 

NON-RECORD 


I h ave seen and concur witlj. 

thiC 


3hanges. With regard t( j [ question in the answer to #2, 


Mark A. Tanner 
Director of the 

Foreign Terrorist Tracking Task Force 
7031 I 


O riginal Messaqe- 

FromL 


J)GC)(FBI) 


Sent: Monday, October 31, 2005 2:05 PM 

To: TANNER, MARK A. (CTD) (FBI); GRIGG, G. CLAYTON (CTD) (FBI) 
Cc; l ^ GC) (FBI) 


Subject: FW 
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Mark, Gurvais, 


These documents pertaining to FTTTF & IDW just came to NSLB's attention today. OCA has 
asked us for any comment we have nIt tomorrow to meet a Thursday ExecSec deadline. 

We wanted to be sure you had seen these - please assure us you have. 


Thanks 


Policy & Training Unit 

National Security Law Branch, OGC 

FRI HQ Room 7947 

203 I 


— O riginal Messaqe- 

From| ~ 


tOGC) (FBI) 


be 

b7C 


1 1/6/2006 
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Se nt: Monday, Octo ber 31, 2005 1:26 PM 
To ! bGCKFBn 

C d l(O Ga (FBI) 


Subject: FW: 




UNCLASSIFIED 

NON-RECORD 

Z1 as we discussed, 
vpc 


be 

b7C 

b2 

b7E 


Assistant General Counsel 
Policy & Training Unit 
Nati onal Security Law B ranch 

(20J ■ 


From: 


(OGC) (FBI) 

Sent: Monday, October 31, 2005 1:04 PM _ 

To:| P CA) (FBI); TANNER, MARK A. (CTD) (FBl]_ 




laNSDl (FBI~ 


ICTD ) (FBI)f 


KENNETH MIC HAEL (ITSD) (FBI)1_ ^ 

QOGC) (FBD i [ 0GC)(FBIK 


loaO) fFBI ): RITCHHART. 
•^GCUPBl) 


lOGC) (FBI); KbLLbY;" 


PATRICK W.amiEBD. 
Subject: RE: 


be 

b7C 


b2 

b7E 


UNCLASSIFIED 

NON-RECORD 

I t my comments on the document are in red. t referenced the P_1A that we just did for 
FTTTF in a couple of places. I'm attaching a copy of the entire PIA FYI. We have not y et 
decided what is appropriate for release/publication from the PIA so Mark Tanner (FTTTF) 
needs to ok use of any of the language from the PIA in this letter. 

I [ Can you send I l a copy of the letter that is going to congress as a follow up 

to tne b I I 1 F GAO report so that we can be consistent in our responses? 

Finally - I'm concerned about the statement that we only have 3 data mining projects in the 
FBI. In the cover letter, you make the point that our definition of data mining only includes 
large sets of data but 1 still think the definition is very broad and could include other systems. 
For example, what about STAS systems? I am not familar with those systems -(but we are 
starting work on a PIA so 1 will be in the near future) but my sense is that they collect and sift 
through a lot of data. What about EDMS and some of the other systems that collect tech cut 
data from FISAs and allow analysts to search through the data for relevant info? I would think 
that could be considered data mining under your definition - but I'll defer to the CIO's office on 
this issue. We just need to make sure we can distinguish these other projects. 


Original Message hr 

From I K OCA) (FBI) b7c 

Sent: Friday, October ,28, 2005 5:23 PM 


1 1/6/2006 
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To: 


Cc:L 


I (OCIO) (FBI); RTTCHHART, KENNETH MICHAEL (ITSD) (FBI)£ 
IfOGOi'FBI) 

llC TDl (FBI) 


Subject: RE 


UNCLASSIFIED 

NON-RECORD 


b6 

hlC 

b2 

blE 


If I can get feedback by COB Monday, 10/31, that would be great. If you have 
questions, please give me a call. Thanks, 


Special Counsel 

Off ice of Congr essional Affairs b2 

2O2I 


O riqinal Message — - 

From i I fOaO) (FBI) 

Sent: Friday, October 28, 2005 8:58 AM 

To: RTTCHHART, KENNETH MICHAEL (ITSD) (FBI);[ 

1 

Cc: | t OCA) (FBI); 

Subject; FW j I 

Importance: High 


lOGC) 


CTD) (FBI) 


b6 

b7C 

b2 

b7E 


UNCLASSIFIED 

NON-RECORD 


Ken and | | 

Your help is needed to resolve issues r egarding subject response. Ken can you 
address issue # 2 on ICDM an d t an you address issue # 5 on PIA. 


ex 




— Original Messaoe-- 

From: 


b2 


]0CA) (FBI) 


Sent: Thursday, October 27, 2005 5:25 PM 
To:i roaoifFBn 


Subject: FW 


UNCLASSIFIED 

NON-RECORD 


b2 

b7E 


I 1 1 understand that you have seen earlier versions of this letter and 
cordinated with CTD in drafting responses. We're close to finalizing the letter 
as described below, but still have some outstanding substantive issues - also 
indicated below. Please provide input from OClO's perspective - both to the 
specific questions noted and to the response generally. Please call if you have 
questions. Thanks, 


Special Counsel 

Office of Congressional Affairs 


b6 

b7C 


1 1/6/2006 
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4 [ 


202-32' 

Or iginal Message 

From j ~l (OCA) (FBI) 

Sent: Thursday, October 27, 2005 5:24 PM 
To: GEDMINTAS RUTA A. 10131 (FBH:) 

Exe cSec (RMD); RMDl fFBIl 


Cc:[ 


Subject: RE:[ 




(CTD) (FBI); 


JdO) (FBI) 


b2 

be 

b7C 

b7E 


UNCLASSIFIED 

NON-RECORD 


ExecSec has reassigned the matter and OCA will coordinate directly with 
OCIO. We will also ensure that AD Hulon and AD Azmi sign off before our AD 
signs the transmittal letter. However, there are still several matters that need to 
be clarified substantively as follows: 

1 . See Answer 2, para 3 on the FTTTF discussion - the inclusion of the word 
"routinely" begs the question - under what circumstances is the data ingested? 
We should clarify this part of the response as well as the sentence re white 
pages. CTD - please resolve this with input from FTTTF. 

2. In the GAO Rpt, the ICDM is described as an initiative - i.e. not operation. 

To the extent it is discussed in a limited manner in the CTD response, we need 
to make sure that it is completely operational. If so, my modified answers to 1 
and 2 need to be tweaked to reflect this development since the GAO report was 
issued. If it's not operational, the language in the remaining answers should be 
modified. OCA will reach out to OCIO to resolve this question 

3. In Answer 3 paragraph 1 - who do we receive requests to run subject-based 
queries from? Without clarification, this feeds into the concern that we could be 
collecting data on individuals without predication. CTD - please clarify / 
respond as this is an FTTTF issue. 

4. I agree with you that Answer 5 is a mishmash - I'm not sure what the answer 
is... Maybe we say that "FTTTF refers to an operational task force. We 
understand the question to ask about data mining initiatives of FTTTF" and 
then answer whether we've conducted an effectiveness study on the data 
mining initiative of FTTTF. If CTD concurs with this approach, OCA will reach 
out to OCIO to resolve. 

5. Answer 7 - what are National Security Systems and why is the significance 
of them having once been exempt from PlAs, but now PIAs are mandated? 
OCA will coordinate with OCIO on this. 


CTD - please resolve substantively to the issues identified for you above by 
COB Monday, 10/31. Call if you have questions. Thanks, 


bo 

I 'H7r 

Special Counsel 

Office of Congressional Affairs 

202 ^ I b2 

— Original Message — 


11/6/2006 
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From: GEDMINTAS, RUTA A. (CTD) (FBI) 
Se nt: Thursday. October 27, 2005 5:10 PM 
To: I lnrA^rFRT^I 


(FBI); ExecSec (RMD);| 

7 - 

Subject: REj 


row) (FBI)f 


jRMD) mi 


JCTD) 


(DO) (FBI) 


b6 

b7C 

b2 

b7E 


UNCLASSIFIED 

NON-RECORD 


If Exec Sec reassigns the the l I as you requested then it would 
probably be most expeditious if OCA went directly to the OCIO to deal 
directly with any issues on this letter. Since AD Hulon is still on the copy 
count, he should review the letter after OCA and the CIO come to an 
agreement on this letter. 


be 

b7C 

b2 

b7E 


Ruta Gedmintas 


O riginal Message 

From f^ 


]OCA) (FBI) 


Sent: Thursday, October 27, 2005 4:5 9 PM 
To: GEDMINTAS, RUTA A. (CTDKFBI)^^ 


fCT Dl fFBIV ExecSec f RMDbf 


Cc; 

(FBI' 
Subject: RE: 


{ocAfjmi 


1 


l(RMD) (FBI) 
_lDO) 


be 

b7C 


UNCLASSIFIED 

NON-RECORD 

Will do Ruta - will CTD be providing feedback on the issues we 
identified? or should I go to OCIO for all of these issues? 


b2 

be 

bVC 

b7E 


Special Counsel 
Office of Congressional Affairs 
202-32' 



Original Message 

From: GEDMINTAS, RUTA A. (CTD) (FBI) 
Se nt: Thursday. October 27. 2005 4:55 PM 
To: I JOCA) (FBI)r~ 


(RMDl fFBD 


Ccd 


l(CID) (FBI); bxecliec (RMD)f 

UlocA) (fbi£ 


(DO) (FBI) 
Subject: RE 


UNCLASSIFIED 

NON-RECORD 


b6 

b7C 

b2 

b7E 


The POC for the CIO for this matter id 


Please 


1 1/6/2006 
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keep me apprised of the CIO's comments and/or approvals 
regarding this letter. 

Thanks, 

b6 

SSA Ruta Gedmintas ^2 

FxRcuti ve Staff 
202-324 1 I 


Original Message 

From j ~l: OCA) (FBI) 

Sent: Thursday, October 27, 2005 12:00 PM 
To: GEDMINTAS, RUTA A. (CTD) (FBU I I 

l (FBI): ExecSec (RMD) 

(FBI) 

cd (''Bll 


UMiiagii 


Subject: RE: | 

UNCLASSIFIED 

NON-RECORD 


b6 

b7C 

b2 

b7E 


After discussions with our AD, we've changed the 
format of the response slightly - see attached. Our 
office will sign a cover letter conveying the 
responses to the specific questions posed by 
Senators Feingold and Sununu. That change is 
reflected in the attached revised draft. We will need 
to get CTD and 010 signoff on the enclosure / 

response to questions. The substance of the 

responses has not changed from the draft tha | | 

sent this morning. Please review the revised 

substance and provide comments / responses to 

questions by by OCA below. Also, please identify 

POC in OCIO - we will coordinate their review as 

well. b 7 c 

ExecSec [ I please reassign this matter to 

OCA and extend the deadline to allow us to 
complete the necessary coordination. 

Thanks much to CTD for all of your work on this to 
date. Please call if you have any questions. 


Special Counsel 

Office of Congressional Affairs 

202-1 I 


Original Message 

From: |(OCA) (FBI) b6 

Sent: Thursday, October 27, 2005 8:42 AM b7c 
To: GEDMINTAS. RUTA A. (CTD) f FBIl 
Cc: | rOCAUFBli 

|(D0) (FBI) i J 


1 1/6/2006 
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I t oCA) (FBI} ^ 

Subject; FW: I | 1^2 

b7E 

UNCLASSIFIED 

NON-RECORD 


Ruta: Here are additional OC A issues with he 
the proposed letter. Regards, f | b7c 

Original Message 

From: ^ Ir oCAl (FBI) 


Sent: Wednesday. October 26, 2005 5:54 PM 



UroCAl (FBI) 


Subject: RE: 


be 

bic 

UNCLASSIFIED 


b2 

NON-RECORD 


b7E 


I - attached is a proposed revised draft - 
I had started working on this before 1 
understood that CTD had taken it back for 
additional revision. The major re-write is in 
response to Qs 1 & 2. Also , per your 
observation, this information needs to be 
conveyed in response to a committee 
request, not Just because Feingold asked the 
questions - so 1 re-did the salutation / intro to 
provide context for our responses. 

My re-writes address a couple of your issues 
below (para 1, answer 1 and para 1, answer 
2). I agree with you that "routinely" in para 4, 
answer 2 (now para 3 on FTTTF discussion in 
answer 2) - it begs the question - under what 
circumstances is the data ingested? We 
should clarify this part of the response as well 
as the sentence re white pages. 

In addition, I think the following issues need 
to be clarified or addressed. 

1 . In the GAO Rpt, the ICDM is described as 
an initiative - i.e. not operation. To the extent 
it is discussed in a limited manner in the CTD 
response, we need to make sure that it is 
completely operational. If so, my modified 
answers to 1 and 2 need to be tweaked to 
reflect this development since the GAO report 
was issued. If it's not operational, the 
language in the remaining answers should be 
modified. 

2. In Answer 3 paragraph 1 - who do we 
receive requests to run subject-based queries 
from? Without clarification, this feeds into the 
concern that we could be collecting data on 
individuals without predication. 

3. I agree with you that Answer 5 is a 
mishmash - I'm not sure what the answer is... 
Maybe we say that "FTiTF refers to an 


1 1/6/2006 
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operational task force. We understand the 
question to ask about data mining initiatives 
of FTTTF" and then answer whether we've 
conducted an effectiveness study on the data 
mining’ initiative of FTTTF. 

4. Answer 7 - what are National Security 
Systems and why is the significance of them 
having once been exempt from PIAs, but now 
PlAs are mandated? 

thanks for the chance to weigh in... 


Special Counsel 

Off ice of Congr essional Affairs 

202I I 


bo 

b7C 


b2 


O riginal Message- 

FromL 


])CA)(FBI) 


Sent: Tuesday, October 25, 2005 
To: | r oCAl 


(FBI) 

Subject: FW: | 
Importance: High 


b6 

b7C 

b2 

b7E 


UNCLASSIFIED 

NON-RECORD 

Here's the problem child. As you will 
see the preamble is problematic. In 
para 1 to Answer 1 - bringing up 
"profile" is not good. I suggest deleting 
the entire sentence. In para 1 to 
Answer 2 suggest dropping 52 
(obvious follow-up is name them). In 
para 4 of Answer 2 - "routinely" 
concerns me likewise the last 
sentence. The answer to Question 5 is 
a mish-mash - 1 recommended deleting 
all reference to the Inspection process 
and personnel performance plans. 


O riginal Message — 

FromJ ICTD) 

(FBI) 

Sent: Thursday, October 20, 2005 


4:40 PM 

Tq : ExecSec (RMD); 

I lOCA) fFBD I 

(OCA) (FBI) 

Subject: FW l 
Importance: High 


be 

b7C 

b2 

b7E 


1 1/6/2006 
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UNCLASSIFIED 

NON-RECORD 


Sorry everyone but the white to 
Senator Feingold didn't attach 
properly.. ..here it is 

Thank you!! 


Intelligence Analyst 
CTD / Execu tive Staff 
FBIHOL X-lJ I 

Desk: <57l\ I 

Securej | 


Original Message — 

Fl^on ^ 1 . (CTD) 

(FBI) 

Sent: Thursday, October 20, 2005 


4:37 PM 
To: ExecSec 
B (OCA) (FBI 
(OCA) (FBD 

Subject:! 


RMPf 


Importance: High 


b6 

b7C 

b2 

b7E 


UNCLASSIFIED 

NON-RECORD 


Everyone: 


Please review the attached draft 
response letters fo 


land 


make revisions as appropriate to your 
office. 


I have also included a copy of the 
original letter from Senator Feingold 
and Senator Sununu. 


A great many people worked on, 
reviewed, and approved of the final 
draft of this letter, and please see the 
complete list of these individuals in 
the attached document entitl ed 
"Backgro und Information for j 


b2 

b7E 


Please return the revisions to me via E- 
mail at your earliest convenience so 
that CTD can finalize the letters and 
obtain AD Hulon's signature (Due date 
is October 25, 2005). 


11/6/2006 
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Thank you so much!! 


Intelligence Analyst 
CTD/Exe cutive Staff 
FBTHO LX l~ I 

Desk: (571 j I 

Secure^ 1 


be 

b7C 


b2 


UNCLASSIFIED 


unclassified 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


11/6/2006 
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(OGC) (FBI) 


be 

b7C 


](OGC) 


SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


From; 
Sent: 
To: 

Cc: [ 


(OGC) (FBI) 

Wednesday, Se ptember 21 , 2005 1:48 PM 
01) (OGA) 

l OGC) (FBI); BOWMAN, MARION E. (01) (FBI) 


TO 

Subject: RE: Summary of meeting re SAO Process/ Ingest of{ | 


I Based upon our prior MOD w i 1 1 think we already have agreement that the FBI wants the 

l) ata This will give us even greater access so as to be able to run batch queries and will, hopefully, 
facilita te streamling the SAO process. 

h as already notified IDW folks that they will need to "refresh" their PIA submission re the addition of this new 
data source. 

What I would be interested in his high level, management approval of reviewing the intel requirements regarding 
what info and from which countries we should be capturing and what our vulnerabilities/gaps are. 

So, 1 would foresee briefing this to the ISPG so as to encourage participation/representation by the division reps, 
i.e., for some accountability. 


Assistant General Counsel 
Policy & Training Unit 
National Security Law Branch 


( 202 [ 


b6 

b7C 

ALL INFORHATION CONTAIHED 

HEREIN IS UNCLASSIFIED 

DATE 08-27-2007 BY 6.5179 DHH/BJA/CAL 


Original Message 

From I b l) (OGA) 

Se nt: Wednesday, Septembe r 21, 2005 1:37 PM 
Toj |OGC) (FBI) 

Subject: kl: bummary or mating re SAO Process/ ingest o( 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Should this be briefed to the ISPG to get buy-in at the EAD and AD level? 


b2 

be 

b7C 

b7E 


-O riginal Messaqe- 


From{_ 


](OGC) (FBI) 


Se nt: Wednesday, Sept ember 21, 2005 12:54 PM 
To . I ' r OGC) (FBI) 

C d tOGCVFBn: G RTGG. G. CLAYTON (CTD) (FBI); CANNON, M ICHAEL A. (RMDI 

(FBI)I l(CTD) (FBI) : BOWMAN MARION F /on /FRTU i 


K OI) (FBI) j 
DUYN. DONALD N . (CTD1 fFBOi 
l^MD) (FBi£“ 
(CD) (FBljJ 


1(OGC ) (FBI)[ 


il) 




(OGA 
,{CD) ( 


J(ITOD) (COl 



(OGC) (FBI) 


IdO) (OGA); VAN 
(IP) (FBI); 
D) (FBI): 


it? 


be 

b7C 


1 1/6/2006 
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Subject: Summary of meeting re SAO Process/ Ingest of | | 

SENSITIVE BUT UNCLASSIFIED 
NON-RECORD 


Tom: 

Today I met with various representatives from RMD/National Name Check Program, 
Counterintelligence Division, Counter terrorism, ITOD, an d Dl to discuss issues involving the 
Security Advisory Opinion process re l I 


These are the pending issues; 


XU 


IgoRst nfl Into IDW' CTD wants to ingest th^" 

Jis amenable to accomplishing this and o ur u nit would De involved with prepanng ah addendum ' 


jnto IDW. 


to the original MOU that 1 worked on w 4 I re thq 1 1 think this would be very valuable, both 

for intelligence generally and facilitating the SAO process more specifically. Outside the Scope 



(1 ) Meet with! I To accomplish the ingest of th^ |, we will need to meet withf 

3 Dl, is arranging a meeting for next weeR! ^ 


:b7E 


This involves legal issues re the MOU. 


(2) Establish Working Group to set Intel Requirements: To determine what changes can be made 
to the SAO process, we need to establish a working group with reps from CD, CID, CTD and Dl, 
who can provide thejntel re quireme nts necessary for ensuring that we capture the necessary 
information from i 1 /ia the j | hat will meet our national security/criminal investi gatory needs. 
This working group will n eed to address whether the info currently being captured by l | /ia the 
I - - ■ ^ eets our current national security threats. 

The SAO process affects more than one division and is in need of review at a macro level, rather 
than simply a countiy-by-country, analyst-by-analyst review. We are hoping that the reps sent to the 
working group are able to represent the views of their divisions so as to develop a cohesive 
strategy. 


b2 

be 

b7C 

b7E 


I l and I will be involved with this Working Group but more as observers because we recognize be 

that this Working Group will need to address intei requirements and is not addressing legal issues. b7 c 


1 1/6/2006 
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Please let me know whether you have any questions. 

If anyone from today's mtg would like to add to these comments, please feel free to do so. 

thanks 

vpc 


From our standpoint, we will need to ensure that if we have thj I that we have assigned the b 2 
appropriate personnel to check the information that is in th ^ I and have the appropriate controls b7E 
(or checks) to ensure accountability for reviewing and responding to these requests. 

1 have asked each of the persons at today's mtg to provide me w/ the appropriate POCs to 
participate in this working group. 

b6 

b7C 

Assistant General Counsel 
Policy & Training Unit 

National Security Law Branch b2 

(202 1 I 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


SENSITIVE BUT UNCLASSIFIED 


1 1/6/2006 
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be 



Sent: 

To: 

Cc: 


Wednesday, September 21, 2005 12:54 PM 
I b oo (FBI) 


lEsr 




rfi, D 


lOGC)(FBI): GRIGG, G, CLAYTON (CTD) (FBI); CANNON, MICHAEL A. (RMD) 
^^(CTD) (FBI ): BOWMAN. MARION E. (Oh (FBI1 


IFBC 


VAN DUYN, DONALD N. (CTD) (FBlH 
(FBI 
(CD) 


;](RMD) (FBI);! 

^CD)(Fm)T 




ntmificfii 


Subject: Summary of meeting re SAO Process/ Ingest o£ 


Zl 


l(CD) ( FBI): 

llTOLJyTCUNJlI 


JiP) 


I 


be 

b7C 


SENSITIVE BUT UNCLASSIFIED ALL IHFOKHATIOH COKTAIHED 

NON-RECORD herein is dhclassified 

DATE 08-27-2007 BY 65179 DHH/BJA/CAL 

Tom; 

Today 1 met with various representatives from RMD/National Name Check Program, Counterintelli gence Div ision, 
Counterterrorism, ITOD, and Dl to discuss issues involving the Security Advisory Opinion process rj 

I I 


b2 

b7E 


These are the pending issues; 


(11 Ingest o! |nto IDW: CTD wants to ingest th 4 [ into IDW. DoS is 

amenable to acco mplish ing t his and o ur unit would be involved with preparing an addendum to the original MOU 
that I worked on w | k ~e th^ | I think this would be very valuable, both for intelligence generally and 
facilitating the SAO process rnofd Specifically. 




This involves legal issues re the MOU. 


b2 

b6 

b7C 

b7E 


11/6/2006 
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(2) Establish Working Group to set Intel Requirements: To determine what changes can be made to the SAO 
process, we need to establish a working group with reps from CD, CID, CTD and Dl, who c an pr ovide th e intel 
requirements necessary for ensuring that we capture the necessary information from | [ via the ! ft hat will 

meet our national security/criminal investigatory needs. i 

This working group will need to address whether the info currently being captured bv| |via the| | 

[meets our current national security threats. 

I ne SAU process affects more than one division and is in need of review at a macro level, rather than simply a 
country-by-country, analyst-by-analyst review. We are hoping that the reps sent to the working group are able to be 
represent the views of their divisions so as to develop a cohesive strategy. b7c 


pnd I will be involved with this Working Group but more as observers because we recognize that this Working 

Group will need to address intel requirements and is not addressing legal issues. 

Please let me know whether you have any questions. 

If anyone from today's mtg would like to add to these comments, please feel free to do so. 

thanks 

vpc 


From our standpoint, we will need to ensure th at if we have th j j that we have assigned the appropriate 
personnel to check the information that is in thi [and have the appropriate controls (or checks) to ensure 
accountability for reviewing and responding to these requests. 

I have asked each of the persons at today's mtg to provide me w/ the appropriate POCs to participate in this 
working group. 


b6 

Assistant General Counsel 
Policy & Training Unit 

Natio nal Security Law Branch , , 

( 202)1 


b2 

b7E 


SENSITIVE BUT UNCLASSIFIED 


11/6/2006 
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DGC) (FBI) 

From: 

GRIGG, G. CLAYTON (CTD) (FBI) 


Sent: 

Wednesday, September 14, 2005 12:38 PM 


To: 1 

I I rOGCI (FRII 

KOI) (FBI); CANNON, 


MICHAEL A. (RMD) (FBI)| 

^UIU)(Fbl) ^ 

Cc: 

, tOGC1 (FB )\ 

loGCI (FBIV BOWMAN. MARION E. (OH 


(FBII RMD1 (FB11 

RMD) (FBI) 


(UGC)(FBII (IISD)(FBg 



Subject: RE: New | 1 Interface Control Document 


UNCLASSIFIED 

NON-RECORD 

b2 

That is fine for me as well. 1 can volunteer the same room again Rm 4712 if that is fine with everyone? b7E 


UC G. Clayton Grigg 

Proactive Data Exploitation Unit (PDEU), Rm 4913 

Terrorist Financing Operations Section (TFOS) 
Counterterrorism Division (CTD) 



ALL IHFORHATIOH COMTAIHED 

HEREIH IS DHCLA33IFIED 

DATE 08-27-2007 BY 65179 DHH/BJA/CAL 


b2 


Or 

From; 
Sei^ 
To:[ 
(FB. 

Sd 


ininni Mp«;«;anp 


Wednesday. September 


Z 


Krr SDIfFBD 

Subject: RE: New ! [ interface Control Document 


(OGC) (FBI) 

L4, 2005 11:54 AM 

1(01) (FBI); GRIGG, G. CLAYTON (CTD) (FBI); CANNON, MICHAEL A. (RMD) 

ICTD) 

](OGC) (FBI); BOWMAN, MARION E. (01) (FBI); 
JRMD) (FBU I l OGCVFBII: 


KOGC) (FBI) 
1(RMD) (FBI 


rDij; v; 
l|FBI) 


b6 

b7C ■ 
b7E 


UNCLASSIFIED 

NON-RECORD 


Ok, let's try Wed, 9/22 @10 am. Does that work? 
vpc 


Assistant General Counsel 
Policy & Training Unit 
Natio nal Security Law Branch 
(202)1 


be 

b7C 

b2 


O riginal Messaoe- 

FromP ^ ^ 


Sent: Wednesday, September 14, 


(01) (FBI) 

2005 11:41 AM 


11/6/2006 







Message 
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To: GRIGG, 9 . CLAYTON fCTD) (FBI); 
(R MD^ (FBI); 

CcL^ 


(FBI); 
(OGC)(FBI);| 




CTD) (FBI) 


] (OGC) (FBI); CANNON, MICHAEL A. 


tOGa, (FBi)‘; ^ 

(RMD) (FBI)C 
](ITSD)(FBI) 


lOGC) (FBI); BOWM AN. MARION E. (01 ) 
IT RMDI (FBI)f ' 


Subject: RE: New| [interface Control Document 


b6 

b7C 


UNCLASSIFIED 

NQN.RECORD 

I'm also free all day Wednesday... 


Program Analyst 
Technology Planning & Operations Support Unit 
Directorate of Intelligence 

202 1 ~~1 



_b2 

b6 

b7C 

b7E 


Original Message 

From: GRIGG, G. CLAYTON (CTD) (FBI) 

Se nt; Wedne^av. Septembe r 14, 2005 11:38 AM 
To ] KOGC) (FBDC 

MI CHAEL A. (RMD) (FBI), 


[ 


fi(.QII(-FBlt 


](OI) (FBI); CANNON, 


fOGG fFBp[ 


JOGC)(FBI)[ 


](RMD) (FBI)[ 


rCTD) (FBI) 

lnr;n fFRTV bow man. MARION 


Subject: RE: Nev i I Interface Control Document 

Importance: High 


](ITSD)(FBI) 


RMD) (FBI); 


be 

b7C 


UNCLASSIFIED 

NON-RECORD 


I am in Philadelphia on Monday returning mid/late Tuesday. The only other must 
commitment I have next week is an 1 1 A to 12P meeting on 9/22. This is a top priority for us 
as well and would like to see it resolved. The IDW owes OGC an EC detailing how they are 
currently complying with PIA requirements on existing datasets. This must be rpmnlRtsd 
nrinr to thp ISPG approving new datasets. I spoke with IDW Program Manager 


about this and it will be completed. 


be 

b7C 


UC G. Clayton Grigg 

Proactive Data Exploitation Unit (PDEU), Rm 4913 

Terrorist Financing Operations Section (TFOS) 
r.r.iintprtprrnri«;in nivisinn (CTD) b2 

b6 
b7C 


(202) 324| l(office) 

(877) 270| |(pager) 


O riginal Message 

From: |(OGC) (FBI) be 

Se nt: Wednesday. September i 4. 2005 11:29 AM b7 

ToJ 1(01) (FBI); CANNON, MICHAEL A. (RMD) (FBI); 

[ CTD) (FBI); GRIGG, G. CLAYTON (CTD) (FBI) 


1 1/6/2006 
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Cc 


mawoneTPIZe^ 


~|0GC) (FBI);[ 


(RMD) (FBI )j 
Subject: RE: NewT 


occyTO 

"Ilnterface Control Document 


|RMD) (FBI) 


IrO GH fFBn: BOWMAN. 


b6 

b7C 


UNCLASSIFIED 

NON-RECORD 


b2 

b6 

b7C 

b7E 


We understood during our negotiations of the ! ^ OU that this did not include 
substantive derogatory responses, which can't be sent via OSIS if they are classifed. 
So, we'll need to clarify what the "FBI responses to the SAO requests" include. 


1 would suggest first having an internal mtg and then a mtg v | | 

Are you available on Monday, 9/19 at 10 am? If so, I'll try to arrange for our NSLB 
conference room. 


]Mike|[ 


Gurvais: 


To move this project forward and to facilitate the parallel DHS/S AO streaml ining 
initiati ve. I thin k we should meet regarding (1) the planned ingest o | | into IDW 

and (2 l b lan to phase out its cables re the SAOs. 

Also, we need to clarify with } [ he following language in the ICD, which is 
attached to this email. 


thanks 

vpc 


Assistant General Counsel 

Policy & Training Unit 
National Secun'tv L aw Branch 
(202) 324 j I 


b2 

b6 

b7C 


O riginal Messaae- 

FromJ^ 


(01) (FBI) 


Sent: Wednesday, September 14, 2005 10:11 AM 

To j ' 

SuDject: New I [Interface Control Document 


UNCLASSIFIED 

NON-RECORD 


b6 

b7C 


This document contains all the fields which! 


is willing to send us... 



b2 

b7E 


11/6/2006 
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Program Analyst 

Technology Planning & Operations Support Unit 
Directorate of Intelligence 
2021 


h2 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


1 1/6/2006 
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Message 


(OGC) (FBI) 


From: GRIGG, G. CLAYTON (CTD) (FBI) 

Sent: Monday, September 19, 2005 1:45 PM 


To: 

(ITSD)(FBI) 

Cc: 

L . (FBI) 

OGC) (OGA) 


lOGC) (f6|) 



Subject: FW; 

Importance: High 


Follow Up Flag: Follow up 
Flag Status: Flagged 

UNCLASSIFIED 

NON-RECORD 


ALL INFORMATION CONTAINED 

HEREIN IS UNCLASSIFIED 

DATE 03-27-2007 BY 65179 DHH/BJA/CAL 


b6 

b7C 


be 

b7C 


be 

' b7C 

Since you a re th ^ I for IDW I thought you would be in the best position to answe| | 

I question regarding the IDW; 

"Gurvais: As you can see from the attached Congressional letter, the questions from Senators Feingold and 
Sununu also mention the "Secure Collaborative Operational Prototype Environment/Investigative Data 
Warehouse" and the "FBI Intelligence Community Data Marts." The Senators ask whether the GAO is correct 
that "the purpose of each of these programs is to analyze intelligence and detect terrorist activities and each 
program relies on personal information, although only FTTTF reties on private sector data." Could you respond 
for IDW." 


UC G. Clayton Grigg 

Proactive Data Exploitation Unit (PDEU), Rm 4712 

Terrorist Financing Operations Section (TFOS) 
r.niinterterrnrifim nivisinn (CTD) 


(202) 324] [office) 

(877) 270j [pager) 


O riginal Message 

From ! ~~l (OGC) (FBI) 

Se nt; Monday, September 19 . 2005 1:11 PM 

To:j lOGC) (FBI); TANNER, MARK A. (CTD) (FBI); f 

GR IGG. G. CLAYTON (CTD I (FBI) ^ ^ 

Cc;[ I (OGC) (FBI) I ~ OGC) (OGA) 

Subject: RE; 


OGC) (FBI); 


b2 

b6 

b7C 


be 

b7C 


UNCLASSIFIED 


NON-RECORD 



All] 

1 


mam recommendations regarding the FBI in the GAO's 8/2005 Report. So, it should be stressed in the talking 
points that the FBI has already begun responding to the GAO's recommendations, i believe there is a target date 
for completion, as well, (mid October??) 


Also, we should stress that the FTTTF's activities comply with the Privacy Act. For example, FBI's use of the data 


1 1/6/2006 
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is covered by the FBI's published system of records notices. And yes, the FBI did not included in its notice a 
description of how individuals can review their personal information because the FBI properly claimed an 
exemption from doing so for law enforcement records, [we could note that this is done for other similar law 
enforcement info] 

We could follow the chart on p. 9 of the GAO Report to hit how the FBI safeguards the info. 

The GAO noted that the PIA should address that the FBI’s datamining effort should comply with 0MB guidance, 
inluding analyses of the info to be collected, the purposes of the collection, the intended use of the info, w/ whom 
info will be shared, how the info is to be secured, opportunities for impacted infidicuals to comment, and the 
choices made by the agency as a result of the assessment. 

Gurvais: As you can see from the attached Congressional letter, the questions from Senators Feingold and 
Sununu also mention the "Secure Collaborative Operational Prototype Environment/Investigative Data 
Warehouse" and the "FBI Intelligence Community Data Marts." The Senators ask whether the GAO is correct 
that "the purpose of each of these programs is to analyze intelligence and detect terrorist activities and each 
program relies on personal information, although only FTTTF relies on private sector data." Could you respond 
for IDW. 


Also, we need to agree with a definition of datamining before we can answer the questions below. IN the 8/2005 
Report, the GAO relies upon its definition from a 5/2004 Report, which defined federal datamining efforts as 
follows; "the application of database technology and techniques-such as statistical analysis and modeling-to 
uncover hidden patterns and subtle relationships in data and to infer rules that allow for the prediction of future 
results." 


Assistant General Counsel 

b2 

Policy & Training Unit 

be 

National Securitv Law Branch 

b7C 

(202) 324| 1 



Original Messaae- 

Fromq 


(OGC) (FBI) 


Sent: Monday, September 19, 2005 12:46 PM 
To: TANNER, MARK A. (CTD) (FBI); | 

Subject: 


](OGC) (FBI); I 


UNCLASSIFIED 

NON-RECORD 


lOGC) (FBI) 


b6 

b7C 


Mark, 

NSLPTU has been tasked to create talking points for Gary Bald (he testifies Wednesday on the Hill) 
regarding data-mining. 

Question are as follows: 

1. Is the FBI data-mining? 

2. Describe the FBI's efforts to safeguard the information. 

Can you put some thoughts into an e-mail? 


1 1/6/2006 
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Thanks, 

JB 


Assistant General Counsel 


National Security Law Policy and Training Unit 

b2 

FBI HO Room 7975 

b6 

STUIII: f202)324 1 

b7C 

Unclassified Fax: (202) 324| | 


Secure Fax: (202) 324| | 



UNCLASSIFIED 


UNCLASSIFIED 


UNCLASSIFIED 


1 1/6/2006 




